Chrome OS is arguably one of the most secure operating systems, but from time to time things need to be upgraded. Recently, Google released a new optional security update to keep your Chromebook secure.

The best gifts for Android users

Generally speaking, updates on Chrome OS are a breeze. They patch bugs, add features, and fix security holes as well. The common thread through all of that, though, is how the update is performed. A simple reboot and 10 seconds later, your Chromebook is ready to use once again with the update applied, even if you’re on beta software.

However, Google is currently making an optional security update available for all Chrome OS users. Detailed by ChromeUnboxed, this Trusted Mobile Platform (TPM) update is completely optional.

If you choose to apply the update, you’ll be applying a patch which squashes a bug that left private TPM keys vulnerable to attack. Unlike most updates, this optional update requires not just a simple reboot, but a full powerwash of your machine.

This vulnerability is very limited, as it would take ages for a brute-force attack to actually attack just one of the TPM keys. However, it’s still something that needs to be patched to keep Chrome OS fully secure, and it affects a massive number of Chromebooks as well, all of which are listed below.

If you are using any of the machines listed at the bottom of this article, you’ll want to check and see if your machine is up to date. To do that, you’ll want to visit chrome://system and hit CTRL+F and type in “TPM.” From there you’ll be able to see your TPM version. If your version is not one of the ones below, you’ll need to perform an update.

0000000000000422 – 4.34

000000000000062b – 6.43

0000000000008521 – 133.33

If you do need to update, the process is simple. Since this will powerwash your machine, you’ll first want to backup any files you’d like to keep. Then, simply perform a powerwash on the machine.

The last step is the most important. When you reach the powerwash screen, there’s a box that gives you the option to “update firmware for added security.” As long as that’s checked, you’ll be up to date when the machine reboots and you’ve signed in.